Article or book title, author's surname, DOI

Dynamic technique to find vulnerability

V. I. Vorobiev1, R. R. Fatkieva2

research article Pages: 28-31

  1. 1 д. т. н., зав. лаб. вычислительных систем и проблем защиты информации Санкт-Петербургского института информатики и автоматизации РАН
  2. 2 к. т. н., с. н. с. лаб. вычислительных систем и проблем защиты информации Санкт-Петербургского института информатики и автоматизации РАН

Abstract

The main methods of dynamic software analysis are considered. Analysis and classification of existed analysators are performed. An example of vulnerability finding is shown as Peach Fuzzing Framework analyzator. As testing server the simple web-server was considered, waiting of joining with client and data transfer, returning to hearing stage at the end. To estimate analyzator work the vulnerability in the form of stack overflow was inserted in the server.

This example and experience of using such systems show effectiveness of that method to find vulnerability software code for which improvement of efficiency is necessary to make increase in depth of the dynamic analysis with application of high-efficiency calculations.

How to cite

Воробьев В.И., Фаткиева Р.Р. Динамический метод обнаружения уязвимостей // Информационно-измерительные и управляющие системы. 2009. № 11. С. 28–31.

References
  1. http://peachfuzzer.com/
  2. Козиол Д. и др. Искусство взлома и защиты систем: Пер. с англ. Е. Матвеева. СПб.: Питер, 2006.